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METHOD AND APPARATUS FOR 
SURVETLLANCE USTNC AN IMAHF SERVER * 

CROSS-REFERENCES TO RELATED APPUCATIONS 
This application claims priority from provisional application Serial No. 
5 60/1 3 1 ,990, filed April 30, 1 999, which is incorporated herein by reference. 

BACKGROUND OF THE INVENTION 
The present invention is in the field of electronic circuits and camera systems. 
More particularly, the present invention is directed to a system for surveillance using 
digital images and image servers. 

10 Many types of camera surveillance systems are known. Typical building 

surveillance systems today capture analog video signals from one or more video cameras 
and transmit those signals to a security panel for viewing by security personnel. 
Deployment of such systems over a large area and making the video images available 
over a network can be problematic because of the large bandwidth requirements of the 

15 video signal. Monitoring of multiple analog cameras is also difficult; for example, a 
human viewer's attention may not be on the security panel or directed to the correct 
camera image at the time an incident occurs. An. in general, the number of cameras a 
human can effectively monitor is limited. While techniques for motion detection in 
surveillance systems are known, the complexity and expense of incorporating these 
20 techniques into analog systems has limited the use of motion detection in many video 

surveillance systems. * 

Another problem that arises in analog surveillance systems is storage and 
playback technology of analog video data. Typical security cameras, at a retail store for 
example, employ videotape technology wherein full-motion video is continuously 



recorded, without regard to whether an incident of interest has occurred. Video tap^ are 
retrieved and played back on the rare occasions when an incident occurs. A major 
problem with such systems is that the videotapes are often recorded at the slowest speed, 
giving the poorest image quality, and are repeatedly rerecorded. As a result, playback 
image quality is often very poor and when an incident does occur, investigators cannot 
get a clear enough image of individuals involved in the incident to make an identification. 
In response to this problem, the Federal Bureau of Investigation has established a 
laboratory program whose primary function is to help law enforcement personnel 
enhance poor quality images from video surveillance systems in order to aid in 
investigations. 

It is known to make digitized video images available over the web for 
presentation by a web browser. Generally, such systems periodically update a fiill-frame 
captured still image from a camera using a push (controlled at the server side) or a pull 
(controlled at the client side) technology. Such systems have had a limited deployment to 
make images of such things as ski slope weather conditions, elephant houses at a zoo, or 
children at a day care center, available over the web using a standard web browser. In 
some applications, such as the day care center, access to the image is password protected 
so that only authorized viewers can receive the images. 

One group of cameras and camera servers for these applications are marketed 
under the brand name Axis. However, these installations are generally limited to single 
or a few cameras and do not have the ability to be deployed as a flexible and fully 
fiinctional surveillance systems. Standard Axis technology also generally relies on fiill- 
fiame updating and has only limited ability to reduce bandwidth of images. 
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A number of techniques are known for compressing digital video information. 
Well known techniques for digital video include hardware assisted techniques such as 
MPEG. DVI. Motion JPEG, and software-only techniques such as QuickTime (RTM). Video for 
Windows. RealVideo (RTM), or AVI. Some of these techniques include mechanisms for 
5 processing and transmitting delta frame information, wherein delta frames encode 
information about pixels that have changed between one frame and another. However, 
these compression techniques for the most part are concerned with the quality of 
reproduction of real-time video image and have not been optimized for use in 
surveillance systems or for use in systems that do not contain custom video playback 
10 software or hardware. 

What is needed is a flexible surveillance system that can capture image data from 
a number of digital cameras and make that data available to viewers in a variety of 
different ways. In some applications, what is further needed, is a surveillance system 
with a basic architecture that is scalable, allowing for efTicient installation, coordination, 
5 and control of one. to a few. to thousands of individual cameras and one to a few to 
thousands of individual clients. Additionally, what is needed is an integrated system for 
digital surveillance that at every step of image processing optimizes images for easy 
storage, analysis, transmission, and presentation in a surveillance system. 
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SUMMARY OF THE INVEhmON 
Specific embodiments of the present invention address a number of problems 
associated with a digital camera surveillance system, such as control and coordination of 
digital cameras that may be widely deployed, analyzing data from multiple cameras, 
making data available in such a way that it can be efTiciently transmitted over a network 
and can be easily displayed to potentially a large number of users, and displaying and 
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controlling image data by existing client software such as a browser. According to the 
invention, these problems are addressed by providing a flexible and scalable surveillance 
system and method; the method and system according to the present invention can work 
effectively in small installations with just a few cameras and only one viewer to 
installations including thousands of cameras, widely dispersed, allowing for selecuble 
viewing by many viewers. 

In a specific embodiment, the invention consists of the following functional 
elements: 

(1) Multiple Frame Grabbers (FGs) that include one or more cameras, digital 
image capture circuitry, and low-level logic routines. In one embodiment, an FG 
comprises a PC equipted with one or more off-the-shelf video capture boards, with each 
video capture board connected to a camera. The PC is programed according to the 
invention, to control the video capture functions and to perform low-level logic 
processing. FG low-level logic processing generally includes one or more of the 
following: short-term storage of full images, computing of differential images, computing 
differential scores for a current image, filtering of gradual ambient light changes, and 
adjusting of camera characteristics. FGs have a communication interface to send full 
fiames and differentia! frames to a coordinator. 

(2) One or more Camera Coordiitators for receiving fijil frames, differential 
frames, and possibly other data from FGs, storing this data, and for adding a higher level 
of image processing. Coordinators generally include logic for one or more of the 
following: detecting and storing an incident from one or more FGs, resolving incidents 
from multiple FGs into an incident sequence; image recognition; logging and cataloging 
incidents according to a rules-based engine; generaUng alarms to security personnel or a 
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server, etc. A coordinator may also include an interface for sending control signals to the 
FG to control basic FG functions such as frequency of capture, focus, contrast, and. for 
moveable FGs. positioning. 

(3) A Camera Server for providing an interface to one or more client viewers. A 
server handles image presentation and may include logic allowing a client to pan and 
zoom the view of an image. A server includes logic to provide an intelligent interface to 
a client viewer including launching windows in the client viewer when incidents are 
detected and updating open windows with differential frames and full frames. A server 
may also include an interface for receiving commands back from a client and forwarding 
those commands to a coordinator when appropriate. In some embodiments, a server also 
provides a possibly high capacity connection to the Internet, allowing potentially 
thousands of viewers to view the same image. 

(4) One or more clients for displaying images delivered by the server. In some 
applications, clients may also receive commands from a user and forward results of those 
commands back to a server. In various embodiments of the invention, clients may be 
familiar, off-the-shelf, browser applications, such as Netscape Navigator (RTM) or Internet 
Explorer, or clients may be proprietary applications. According to the present invention, 
where desired in a particular installation, both off-the-shelf and proprietary clients can 
simultaneously access image data. 

According to the invention, these elements perform separable tasks appropriate to 
that clement to allow for a flexible and scalable surveillance system. The flexible system 
according to the invention allows various data and image processing tasks to be easily 
incorporated into specific systems depending on application. In security surviellance 
systems where later authentication of a recorded digital image is important, for example. 



cameras and FGs can employ digital signature Icey technology or other technology to 
verify that an image was not altered after it was initially captured. 

A further understanding of the invention can be had from the detailed discussion 
of specific embodiments below. For purposes of clarity, this discussion refers to digital 
devices and concepts in terms of specific examples. However, the method and apparatus 
of the present invention may operate with a wide variety of types of digital devices. It is 
therefore not intended that the invention be limited except as provided in the attached 
claims. Furthermore, it is well known in the art that logic systems can include a wide 
variety of different components and different functions in a modular fashion. Different 
embodiments of a system can include different mixtures of elements and functions and 
may group various functions as parts of various elements. For purposes of clarity, the 
invention is described in terms of systems that include many different innovative 
components and innovative combinations of components. No inference should be taken 
to limit the invention to combinations containing all of the innovative components listed 
in any illustrative embodiment in the specification, and the invention should not be 
limited except as provided in independent embodiments described in the attached claims. 

The invention will be better understood with reference to the following drawings 
and detailed description. 

BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 is a diagram of an illustrative embodimem of the invention using 
representative hardware elements as it might be deployed in a moderately sized business 
or academic setting. 
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FIG. 2 is a diagram of an alternative embodimem of the invention using 
representative hardware elements as it might be deployed at a single location, such as a 
single moderately sized building. 

HG. 3 is an illustrative functional diagram of an embodiment of the invemion. 
5 DESCRIPTION OF THE SPECfflC EMBODIMENTS 

OVERVIEW OF TWO TYPICAL EMBODIMENTS 

Example Embodimgnt for a Laroe ramp ^^^ 

Fig. 1 shows an illustrative specific embodiment of a surveillance system 
10 according to the invention. Such a system consists of a number of frame grabbers (FGs) 
10. each of which include one or more digital cameras 12 and controller 14. FGs are in 
communication with coordinator 20. which may coordinate one to many FGs. 
Coordinator 20 typically will include frame and incidem storage 22 and may include 
rules storage 26. Coordinators 20 communicate witf, server 30. which will typically 
15 include server image storage 32 and client interface 34. Interface 34 communicates with 
one or more viewing clients 40-12. Cliem 40-42 may be standard, off-the-self diem 
software allowing display of images and running on an appropriate computing device, 
such as a PC or workstation, web-capable television, etc. Well-known, currently 
available, browser clients include Netscape Communicator and Internet Explorer. One or 
20 more of clients 40^2 may also be propriety client programs and may include specialized 
hardware, such as panel 42. which may be a security surveillance panel or a kiosk 
display. 

Connections 50 are shown in Fig 1 to illustrate a functional data pathway between 
components. As is known in the art. such pathways can be network comiections. 
25 backplane bus connections, wireless connections. IC interconnects, or any other data 
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channel appropriate for a particular embodiment hardware configuration of the invention. 
According to the invention, the elements shown in Fig. 1 may be embodied in physically 
separable electronic devices, or alternatively, the elements may be embodied into a small 
number of more integrated physical devices. FGs 10, for example, may be constructed as 
a single electronic unit, with the camera and controller component sharing some of the 
same logic circuits. In some insullations, some or all of coordinators 20 may exist as 
processes on the same computer that holds server 30. Conversely, as is known in the art, 
server 30 or coordinator 20 may be physically constructed of a number of closely 
cooperating computer hardware devices. Thus. Fig. 1 can be understood as an illustration 
of functional elements of the invention with functions performed on different 
arrangements of hardware components as appropriate to a particular installation. 

Example Embodiment For a Small Sit e Installation 

Fig. 2 shows an alternative illustrative embodiment of a surveillance system 
according to the invention using a single computer 100 as a hardware platform. In this 
system, frame grabbers include one or more digital cameras 12 and video capture boards 
13. Other functions of controller 14 arc peifonned by logic running on computer 100. 

C^ture Boards 13 are distributed in bus slots in the computer and communicate 
with the camera either through a direct line or via wireless transceivers. Coordinator 20 
exists as logic routines running on computer 100. using storage of the computer for frame 
and incident storage and any rule storage. Server 30 is also a process running on 
computer 100. 

A client process 40 may also in some embodiments run on computer 100 to allow 
local viewing of captured images. Typically computer 100 will also have an image 
server 30 for remote client viewing. Interprocess communication in computer 100 allows 
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for data exchange and in some cases data sharing between the various functional 
elements. 

COMPONENTS OF A SURVEILLANCE SYSTEM 
Frame Grahh«»r Cf^^rfl 

5 FG 10 includes an off-the-shelf or custom camera 12 capable of cooperating with 

other hardware to produce a digitally encoded image array. Many different types and 
brands of such cameras are available. Some of these cameras include a microphone and 
wireless transmission capability between the camera and the capture circuitry. For 
example, a currently available off-the-shelf Remington(TM) brand audio/video 
10 sender/receiver combination allows for image/audio capture at low lux and wireless 
transmission to a capture board. Many such cameras employ either well-known CCD or 
CMOS technology to capture a digital image. It is expected that an even wider range of 
such cameras will be available in the future, with greater capabilities that will make them 
particularly suitable for use in some embodiments of the presem invemion. Camera 
15 hardware often includes "steady cam" technology that performs some correaions for 
vibrations of the camera. 

In one desirable embodiment, camera 12 will generally be non-moving (i.e. fixed) 
and will be located to capture a view of interest. As is known in the art, camera 12 can be 
fitted with a wide-angle or "fish eye" lens to allow it to capture a large area. In such a 
20 case, software in the FG or in the coordinator or in the server is used to remove distortion 
caused by the lens and to flatten the captured image for viewing. 

In some embodiments, an FG captures an image of a huger area than will 
typically be displayed at one time at a client. Logic routines in either the FG. the 
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coordinator, or the server allow a client viewer to pan and zoom a view of the captured 
image. 

Some capabilities of FG cameras that are either presently available or are 
anticipated soon to be available are the ability to capture frames of 15 million pixels 
allowing for greater zooming capability; the ability to operate at very low light levels, 
and the ability to capture infrared radiation or other non-visible electromagnetic radiation 
and the ability to capture synched audio data. Camera hardware often includes "steady 
cam" technology that performs some corrections for vibrations of the camera. 

As is known in the art, CCD-type video digital cameras generally produce an 
analog video scan signal, which must converted to digital for digital processing or 
storage. However, it is expected that cameras will increasingly become available that 
produce a byte-stream or bit-stream description of the detected image. 

Frame Gra bber Controller 

Image Capture and Standard Image fjwoding 

Controller 14 includes capture circuitry and low-level processing and control 
logic immediately associated with the camera to allow for an efficient and flexible overall 
system. In one embodiment, controller 14 may be a PC-type microcontroller with an off- 
the-shelf, programmable, video capture board. In an alternative embodiment, controller 
14 may include or be comprised of custom designed logic circuits. Controller 14 
captures, and for a short time stores, sequential still images from the camera in the form 
of digital data. For analog output cameras, controller 14 converts the analog signal to 
digital. 

As is know in the art, video capture boards receive a video signal and convert it to 
still digital frames at a selectable frame rate. Generally, the still digital frames are 
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encoded as full-color images and the capture board may perform some low-Ievel color 
and brightness correction of the received signal. The capture board delivers, on demand, 
digital captured frames. In some capture boards, the image delivered is compressed and 
converted to an encoded format such as GIF or JPEG while in others only 24 bit color is 
5 possible. Off-the-shelf video capture boards brands include Videum and ATI. 

Digital encoding of images can take many different forms. One well-known, 
uncompressed form for fullK:olor digital images is a two dimensional array of numerical 
pixel values, with each pixel holding three 8-bit numerical values, one value indicating 
Red intensity, one Green, and one Blue. Thus, each pixel requires 24 bits of data and can 
10 represent one of 2" (16 million) different colors and an uncompressed, 24-bit image with 
an image size 640 X 800 pixels requires 1.5 Mbytes of storage. Other encoding schemes 
are known, such as schemes that use fewer bits for each color value, and schemes that use 
different numbers of bits for different colors. 

One well known technique for image compression can be generally referred to as 
15 the table/substitution technique. In this technique, the total number of colors actually 
displayed in a single image is reduced from 16 million to a smaller number, such as 256. 
A palette or table is created by analyzing the original 16 million color image and 
selecting 256 of those colors for display. Those selected 256 colors are then stored in a 
256 entry indexed palette and the index number (in one known method, an S-bit number) 
20 for a color is substituted as the pixel value for that color. The substituted pixel image and 
the palette are then used to represent the image, reducing a I.S Mbyte image to closer to 
.5 Mbytes. In many known encoding formats, compression techniques are used to fiirther 
reduce the storage needed for an encoded image. In some table/substitution schemes, 
certain table values are reserved for predefined colors. Pure black and pure white ar« 
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commonly reserved colors. In some schemes, a value is also reserved for a transparent 
pixel. 

Processing Captured Frames 

Once an image is captured, the FG controller processes the captured image and 
determines whether to send to the camera coordinator a full frame, a computed 
differential frame, or no frame. This determination may be based the amount of change 
between the captured image and a previously transmitted image, the elapsed time since 
the previous transmit, the number differential frames sent since the previous fiill frame, 
or other criteria. In one embodiment, a frame grabber also transmits differential scores 
that indicate an amount of change in the current frame from the previous frame. 

A number of variations in the processing of captured images to generate 
differential frames are possible according to the invention, and processing steps can take 
place in various orders or in parallel. For ease of understanding, the following 
description is provided of an exemplary specific embodiment processing. 

Basic processing according to the invention involves a reference frame and a 
current frame, which are generally images of the same size and same encoding. The 
current fi^ie is the frame newly captured by the capture board. The reference fi^e is a 
frame held in memory at the controller to which the current frame will be compared. 

Computing differential scores 

A differential score is determined for a current frame by determining which pbcels 
in the current frame have a different value from the corresponding pixels in the reference 
frame. A number of variations in computing and expressing differential scores are 
possible. A raw differential percentage score may be computed by comparing each bit in 
the current frame to the corresponding bit in the reference frame. If there is any 
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difference in value, that pixel is considered a changed pixel. The ratio of the sum of all 
changed pixels to the total number of pixels in the image is the raw differential 
percentage score. 

A differential percentage score may also be computed using threshold logic 
5 routines to filter out differences between pixels that are not of interest, such as when a 
change is of minor intensity, or only affects a very small area. Threshold algorithms can 
be defmed in a variety of ways appropriate to the particular overall image conditions and 
applications. Thresholds can be defined that are different for different colors, such that a 
change in a green or red value, for example, is more likely to cause a pixel to be counter 
10 as different than a change in a blue value. 

In a further embodiment, the comroller may analyze an image by dividing the 
image into cells of roughly 5 X 5 pixels and determining the number of 5 X 5 cells in the 
currem image that have changed compared to the reference image and generating a 
differential score from this comparison. 

15 In a further embodiment, threshold logic can compare a currem frame to more 

than one previous frames in order to determine whether captured values are "flickering" 
while the actual image before the camera is unchanged. Such flickering is common in 
low light situations. 

The controller may compute more than one type of differential score for an image. 
20 A differential score may be used by the controller to determine whether or not to transmit 
a frame according to the comroller's rule set and whether or not the controller believes an 
incidem has occurred. One or more differemial scores may be transmitted along with 
firames transmitted by the controller to the coordinator. 
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Creating Differential Frames 

A differential frame is constructed of the same size as the captured image and a 
reference image, using the same or a similar file format. In the diflferential frame, pixel 
values from the current frame that are identical to or within tolerances of the reference 
frame are set to a value indicating transparency and pixels that have changed retain the 
value from the newly captured image. This allows for a high compression of the 
differential frame and for easy updating at a client viewer by superimposing a series of 
differential frames over a displayed full frame, as discussed below. Once the diflFerential 
frame has been constructed, the controller can perform a still image compression routine. 
In many image formats, this compression routine is built into the format. 

Other Controller Operation 

As can be seen from above, in a simple and compact embodiment, a controller can 
operate with only two full frames in memory, a current frame and a reference frame, and 
a buffer for holding differential frames. As discussed above, in an alternative 
embodiment, the controller may retain additional image files to maintain a history of 
image processing for retransmission purposes or for more involved threshold and image 
analysis. 

The process of computing one or more differential scores and constructing a 
differential frame may be combined such that as the controller scans the pixels in the 
captured image frame, it computes differential scores and builds a differential frame. 

From time to time, and whenever requested by a coordinator, a controller will 
transmit a current full frame. Among other functions, this allows the coordinator to catch 
up pixels that changed so gradually over time that they never registered as differential 
pbcels. In one embodiment, a full frame is sent every 10 images. 
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The controller logic may perform a number of other image processing fimctions 
as known in the art, such as converting the captured visual image into a different foimat. 
One format that may be advantageously used is the well-known GIF format for encoding 
and compressing digital images. Other suitable formats include png, jpeg, etc. 

Moving camera 

In a preferred embodiment of the present invention, the camera is motionless. 
This allows for simpler control and processing logic and for easier detection of incidents 
and computation of differentials. Any panning or zooming for viewing the image is 
accomplished not by the camera itself, but by logic functions closer to the diem viewer, 
as described below. 

In an alternative embodiment, the invention may include moving or moveable 
cameras. When a camera is moving, techniques that take into account movement of the 
camera are used to compute the differential or computing of the differential can be 
suspended during camera movement and full captured images can be transmitted. 
Camera r oordinator 

Coordinator 20 receives frame data and possibly other control data from one or 
more FGs. According to one embodiment of the invention, frame data is in the form of 
still images, including full (update) fhunes and differential frames and may include 
differential scores from some or all frames. Control data may include data indicating that 
the FG deteaed a differential. It may also include data indicating the current position or 
focus depth of a moveable FG, an FG identifier, and a time signal. Transmission of 
frames to the coordinator can take according to one or more of the following: at 
expiration of a time interval since the last transmission, upon detection of a difference at 
a controller, at the request of the coordinator. 
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Coordinator 20 in one embodiment also may send commands to the FGs to 
control aspects of frame acquisition or transmission. Such commands may include a 
resend, change camera characteristics such as brightness or contrast, send a foil frame, set 
the frequency for frame transmission, establish rules regarding when frames should be 
5 transmitted, establish a tolerance level for determining if a differential frame should be 
transmitted, etc. 

In a particular embodiment, the coordinator will include an interface allowing a 
user to program certain features of the controller, such as indicating regions of the visual 
field that should be processed differemly. For example, the coordinator might be able to 
10 receive user commands allowing a user to indicate that pixel changes in certain regions, 
such as windows or doorways, are not of interest during certain hours. 

In one embodiment, a coordinator is primarily responsible for determining if an 
incident occurred. The coordinate accomplishes this using a rules-based engine or 
similar logical process that may take into account time of day, day of the week, nature of 
15 the pixel change detected, etc. In detennining 4hat -an incident has occurred, the 
coordinator takes into account differential scores transmitted by the EG. 

In one embodiment, the coordinator also provides the principal incident and 
histoiy database for its connected cameras and includes the ability to playback stored 
incidents. In further embodiments, the coordinator additionally has the ability to connect 
20 multiple incidents, triggered at multiple cameras, into an incident sequence. The 
coordinator has positional and view information about each camera and information 
about overiapping regions of cameras. A coordinator will generally include a large 
amount of longer term, non volatile storage, such as large disk drives or removable 
storage technologies such as tape, or write/once or r/w CDs or DVDs. 
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In embodiments with a large number of cameras, a coordinator will be a work 
horse machine accomplishing much of the computation-intensive processing needed by 
the system. As a result, a coordinator in such a system may be constructed of a number 
of cooperating computers or a multi-CPU computer system. A coordinator handles the 
5 principal time-stamping function for frames or incidents. 

The coordinator includes a management interface to a management station 26, 
which may be local to the coordinator or may connect remotely. The management 
interface allows a user to perform various management functions, such as setting time 
parameters for whether incidents from particular cameras will be of interest, establishing 
10 other rules definitions. Alerts regarding cameras that have not reponed in for a while 
(exception) report generation. Installing new software and other maintenance fiinaions. 
The management station reports on its interactions with the camera server, such as 
cameras that have been accessed and how frequemly and it receives commands from the 
camera server. 

15 The coordinator can also perform advanced image processing tasks such as image 

recognition or tracking a person or object identified in an image or determining that an 
object is coming toward or moving away from the camera. The camera coordinator sends 
commands to the camera server regarding detected incidents or changes of an image that 
allow the server to intelligently control the view of connected clients by changing the 
20 view of Images displayed at the clients or by creating new windows and directing images 
to those new windows. 

Image Sgrvyr 

A principal function of image server 30 is image delivery to client software for 
presentation to an observer. In a particular embodiment, the server can force a client to 
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create new windows and can direct incidents to different windows. In a preferred 
embodiment, the server employs /w^A technology, wherein the server can periodically 
deliver a differential image to the browser. The server's delivery of full images and 
differentials allows a client viewer to display a pseudo real time representation of the 
5 image seen by the camera by overlaying the differential images on the existing displayed 
image, with a minimum of processing and a minimum of transmission between the server 
and the client. 

A server includes cache storage and may keep a currem full frame in memory for 
all aaive attached cameras so that the server can transmit a full frame on demand when a 
10 client requests it. The image server typically includes software with the ability to perform 
pan and zoom functions of an image. 

In one embodiment, a server has the necessary logic to talk to Java code, or 
similar code, running in the client. This allows a server to determine if it should send a 
new image, such as to a newly connected client. The newly connected client will receive 
15 a full firame and enough differential frames to get synchronized with the current view. 

Prior art systems for transmitting moving images such as mpeg or the I-see-you,- 
you-see-me system suffer from utilizing a more complex encoding scheme requiring 
more specialized hardware and software interfaces on both the captured end and the 
received end. The presem invenUon benefits from the wide distribution of image viewing 
20 systems using simple static image coding in compression formats. 

It receives commands from the client that it passes on to the coordinator. 
Requests for information. Initiate of image streams. Termination of last image stream. 
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According to the invention, a surveillance system may be built with a low- 
speed/low-bandwidth connection between the FGs and the coordinator, a high- 
speed/high-bandwidth connection between the coordinators and the server, and low-speed 
connections with individual clients. 

Client Viewgr 

In one embodiment, client viewers 40 can include off-the-shelf PC's running off- 
the-shelf internet browsers. Preferably, the browsers will be JAVA (RTM) -enabled to allow 
image sei-ver 30 to switch views or create new windows. 

Clients can also include custom surveillance consoles, such as 42. These consoles 
can coexit in a networked environment with other viewers. 

FIG. 3 is an illustrative block diagram shewing exemplary frame handling 
according to a specific embodiment of the invention. It will be clear to those of skill in 
the art that many variations in image and frame handling within the scope of the 
invention are possible. 
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1. A method of viewing image data from a plurality 
of cameras comprising: 

at said cameras, capturing data sets representing 
images; 

at said cameras, periodically transmitting said 
data sets to a plurality of camera coordinators, a 
plurality of said camera coordinators each receiving 
data sets from multiple cameras; 

at said camera coordinators, determining whether 
one or more of said data sets is of interest; 

transmitting data sets of interest from said 
camera coordinators over a network to an image server, 
said image server not local to one or more of said 
cameras; and 

providing said data sets from said image server 
for viewing by a user. 

2. The method according to claim 1 further 
comprising : 

storing one or more sequences at said image 
server. 

3. The method according to claim 1 further wherein: 
said camera coordinators include logic for performing 
one or more of the following on data sets from 
multiple of said cameras: 

detecting dti incident: comprising one or more data 
sets from a camera; 

resolving incidents from multiple cameras into an 



incident sequence ; 



image recognition; 

logging and/or cataloging incidents according to 
a rules-based engine; or 

generating security alarms. 

4. The method according to claim 1 further wherein: 
said camera coordinators include an interface for 
sending control signals to one or more cameras to 
affect one or more camera functions. 

5. The method according to claim 4 further wherein 
said camera functions comprise one or more selected 
from the group: 

frequency of image capture, focus, contrast, or 
positioning for moveable cameras. 

6. The method according to claim 4 further wherein 
said control signals comprise one or more selected 
from the group: 

resend, change camera characteristics such as 
brightness or contrast, set the frequency for frame 
transmission, establish rules regarding when frames 
should be transmitted, or adjusting tolerance levels 
for determining if an alarm should be transmitted, 

7. The method according to claim 1 further wherein: 
said camera coordinators receive and process control 
data from one or more cameras. 



The method according to claim 7 further wherein: 
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said control data includes one or more items 
selected from the group consisting of.: 

an indication that a camera detected a 
differential; 

data indicating current position or focus depth 
of a moveable camera; 

a camera identifier; or 

a time signal of a camera at a given frame 
capture. 

9* The method according to claim 1 further wherein: 
transmission of data sets from a camera to a 
coordinator can be occasioned by one or more of the 
following : 

expiration of a time interval since the last 
transmission; 

detection of a difference at a controller; or 
at the request of the coordinator. 

10. The method according to claim 1 further wherein: 
said coordinators determine if an incident occurred by 
using a logical process accounting for time of day, 
day of the week, nature of the pixel change detected, 
and data sets received from said cameras. 

11. The method according to claim 1 further wherein: 
said camera coordinators indicate to said server 
defected incidents or changes of an image that allow 
said server to intelligently control a view of one or 
more connected clients by changing the view of images 
displayed at the clients or by creating new windows 



directing images to those new windows. 



12. The method according to claim 1 further wherein 
said coordinators include an incident and history 

database for its connected cameras and can playback 

stored incidents; 

said coordinators can connect multiple incidents 

triggered at multiple cameras, into an incident 

sequencer- 
said coordinators have positional and view 

information about each camera and information about 

overlapping regions of cameras; 

said coordinators perform time-stamping for data 
sets and/or incidents; 

said coordinator provide a management interface 
allowing a user to perform various management 
functions, such as setting time parameters for whethei 
incidents from particular cameras will be of interest, 
establishing other rules definitions; specifying 
alerts regarding cameras tfhat have not reported; 

installing new software and other maintenance 
functions. 



said coordinators perform advanced image 
processing tasks such as image recognition or tracking 
a person or object identified in an image or 
determining that an object is coming toward or moving 
away from one or more of its connected cameras. 



